This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138372e302f32342d3234203d3e20323634343235.roa File: 3133312e3232312e3138372e302f32342d3234203d3e20323634343235.roa (raw, json) Hash identifier: fo1o7sJg+MA95QFfLJpSKEaaHeQnh4loPrfk7bBSQVg= Subject key identifier: 6E:F4:2C:59:0B:B5:F9:9F:39:D7:02:EB:EF:EE:BA:A0:EC:7C:A6:F7 Certificate issuer: /CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215 Certificate serial: 36864A94C8673DBD4863FFD9EA0B92438BF48C5A Authority key identifier: 73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer Subject info access: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138372e302f32342d3234203d3e20323634343235.roa Signing time: Wed 17 Dec 2025 18:11:29 +0000 ROA not before: Wed 17 Dec 2025 18:06:29 +0000 ROA not after: Wed 16 Dec 2026 18:11:29 +0000 asID: 264425 IP address blocks: 131.221.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 18:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:86:4a:94:c8:67:3d:bd:48:63:ff:d9:ea:0b:92:43:8b:f4:8c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215 Validity Not Before: Dec 17 18:06:29 2025 GMT Not After : Dec 16 18:11:29 2026 GMT Subject: CN=6EF42C590BB5F99F39D702EBEFEEBAA0EC7CA6F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d3:be:32:21:37:ae:fa:d4:19:01:03:bd:eb: d3:05:9b:9e:57:2d:5a:78:b4:6f:75:26:af:9a:bd: 48:02:c5:65:ed:0d:cc:2f:0c:48:56:06:c6:65:32: 8b:67:ff:a1:f0:36:50:9a:74:0f:1f:91:22:16:57: 54:47:99:8d:a7:7b:7b:73:6c:2c:5d:85:98:09:02: 46:06:6c:80:42:60:77:c4:63:c3:04:70:cd:4c:6d: 69:b4:c7:97:1c:ee:fa:5f:eb:52:0a:a5:0d:12:72: 0a:74:9c:7d:41:2f:86:d4:e4:60:91:5d:7d:47:d2: 94:e6:c8:7e:8f:26:9a:0c:d7:9f:25:83:1c:ff:76: 48:82:a7:8b:14:f9:f8:66:76:1d:fe:53:d3:5d:ed: 20:6f:66:60:fb:d4:74:95:65:7b:de:b4:66:03:7e: 7e:b5:03:47:8d:b6:c2:57:ce:07:00:99:41:69:44: c0:3a:1f:a9:b4:f8:da:56:e4:4e:d8:0a:86:a2:97: 0f:a7:6b:43:ae:dc:52:70:94:83:0e:98:b3:d7:89: a8:39:18:a5:c9:82:c5:72:dd:ff:c0:5c:d8:d4:db: bd:48:fe:21:6f:b3:61:42:7e:ed:27:42:15:4b:01: c4:bf:8e:44:aa:0a:ce:23:75:af:24:b1:20:82:a5: a6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F4:2C:59:0B:B5:F9:9F:39:D7:02:EB:EF:EE:BA:A0:EC:7C:A6:F7 X509v3 Authority Key Identifier: keyid:73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138372e302f32342d3234203d3e20323634343235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.187.0/24 Signature Algorithm: sha256WithRSAEncryption 58:fd:25:54:08:e3:ff:84:00:6e:69:9e:c0:ca:cc:b3:8a:0f: f5:20:86:22:57:d5:1a:10:54:ec:1d:d3:8e:04:76:62:df:14: 5e:ac:84:6c:7f:0c:eb:e8:10:7c:1d:b6:20:6d:31:4b:a1:b0: 19:84:f4:54:97:99:fe:b8:df:e6:cd:fb:6e:15:a3:21:98:21: 99:3a:2d:75:f7:60:36:fa:6e:63:e9:0f:c9:83:bd:a8:26:64: 6c:d3:59:fd:a3:c8:fb:ca:c9:9c:65:c7:c6:8f:b9:59:a7:72: 89:98:78:1c:b5:e6:cc:ed:03:ef:28:03:d1:ad:01:49:b0:2c: 44:e6:20:3b:44:95:09:d9:30:32:ba:61:1a:94:fc:5f:df:11: 5e:c4:25:e2:97:14:48:63:02:5c:d6:72:39:b2:25:0f:bb:94: 25:38:b7:5a:dd:79:d6:16:af:1c:3f:69:cb:c0:0c:e0:83:9f: 13:67:f7:0f:24:ed:18:4a:b8:b7:9a:cf:fc:80:09:71:8b:c5: e2:40:e5:c5:69:86:50:0a:95:36:e8:0f:1b:0a:4f:cb:6f:32: 0e:63:dc:5d:26:30:1d:43:2a:fd:e8:a3:c2:8c:be:e3:48:4b: 0e:64:71:33:b2:85:75:ef:1c:e1:ab:73:06:ff:c7:f6:c8:26: 73:0d:ae:67 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUNoZKlMhnPb1IY//Z6guSQ4v0jFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBNjJDQ0FFQTE1NEJGQTcyQjBDRTk5M0RBMDJDMUFE Q0VBNTIxNTAeFw0yNTEyMTcxODA2MjlaFw0yNjEyMTYxODExMjlaMDMxMTAvBgNV BAMTKDZFRjQyQzU5MEJCNUY5OUYzOUQ3MDJFQkVGRUVCQUEwRUM3Q0E2RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq074yITeu+tQZAQO969MFm55X LVp4tG91Jq+avUgCxWXtDcwvDEhWBsZlMotn/6HwNlCadA8fkSIWV1RHmY2ne3tz bCxdhZgJAkYGbIBCYHfEY8MEcM1MbWm0x5cc7vpf61IKpQ0Scgp0nH1BL4bU5GCR XX1H0pTmyH6PJpoM158lgxz/dkiCp4sU+fhmdh3+U9Nd7SBvZmD71HSVZXvetGYD fn61A0eNtsJXzgcAmUFpRMA6H6m0+NpW5E7YCoailw+na0Ou3FJwlIMOmLPXiag5 GKXJgsVy3f/AXNjU271I/iFvs2FCfu0nQhVLAcS/jkSqCs4jda8ksSCCpaZbAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUbvQsWQu1+Z851wLr7+66oOx8pvcwHwYDVR0j BBgwFoAUc6YsyuoVS/pysM6ZPaAsGtzqUhUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0dSTExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpL NGQvMC83M0E2MkNDQUVBMTU0QkZBNzJCMENFOTkzREEwMkMxQURDRUE1MjE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczQTYyQ0NBRUExNTRCRkE3 MkIwQ0U5OTNEQTAyQzFBRENFQTUyMTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NHUkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAv MzEzMzMxMmUzMjMyMzEyZTMxMzgzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNDM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPduzANBgkqhkiG9w0BAQsFAAOCAQEAWP0l VAjj/4QAbmmewMrMs4oP9SCGIlfVGhBU7B3TjgR2Yt8UXqyEbH8M6+gQfB22IG0x S6GwGYT0VJeZ/rjf5s37bhWjIZghmTotdfdgNvpuY+kPyYO9qCZkbNNZ/aPI+8rJ nGXHxo+5WadyiZh4HLXmzO0D7ygD0a0BSbAsROYgO0SVCdkwMrphGpT8X98RXsQl 4pcUSGMCXNZyObIlD7uUJTi3Wt151havHD9py8AM4IOfE2f3DyTtGEq4t5rP/IAJ cYvF4kDlxWmGUAqVNugPGwpPy28yDmPcXSYwHUMq/eijwoy+40hLDmRxM7KFde8c 4atzBv/H9sgmcw2uZw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:51:09 2025 by rpki-client